ansible - 如何用ansible删除当前的sudoer？

Question

我知道这听起来很奇怪。但是我需要在正确设置我的剧本后删除当前用户。

我有一个更新服务器并正确配置用户和管理员的剧本。我使用给定的用户成为 root 并设置 admin 我的主要 sudoer。

只有当它不是 root 或 admin 时，我才需要删除我剧本末尾的 ansible_ssh_user 吗？

以下解决方案不起作用

---
- hosts: all
  become: yes
  become_user: root


  tasks:
    - include_vars: secrets.yml

    - name: add admin user
      user: name={{ ADMIN_USERNAME }} password={{ ADMIN_PASSWORD | password_hash('sha512') }} shell=/bin/bash

    - name: delete current sudoer if not admin or root
      user: name={{ ansible_ssh_user }} state=absent remove=yes
      when: ({{ ansible_ssh_user }}!={{ ADMIN_USERNAME }}) or ({{ ansible_ssh_user }}!={{ ADMIN_USERNAME }})

它返回:

userdel: user admin is currently used by process 23537

Answer 1

有点晚了，但为了将来的引用，我已经完成了这两项任务:

# first change the current ssh user to the new user
- name: user | switch current user to {{ new_user }}
  set_fact:
     current_user: "{{ ansible_user }}"
     ansible_user: "{{ new_user }}"

# force remove the old user
- name: user | remove current user ({{ current_user }}) if it's not "{{ new_user }}"
  become: yes
  user:
    name: "{{ current_user }}"
    state: absent
    remove: yes
    force: yes
  when: "current_user != new_user"